Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EDE71AD492B211EF8D7CB9A1762E951A.roa
File: EDE71AD492B211EF8D7CB9A1762E951A.roa (raw, json)
Hash identifier: 5HzTlqcSeL58M+I8Ap5BLc7JTaR74BkXmP8l3gNQCWQ=
Subject key identifier: 2C:D9:F7:55:3B:73:43:D2:18:54:40:D7:C7:1D:58:37:5C:8A:D0:A8
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: C8D7
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EDE71AD492B211EF8D7CB9A1762E951A.roa
Signing time: Fri 25 Oct 2024 09:24:26 +0000
ROA not before: Fri 25 Oct 2024 09:24:23 +0000
ROA not after: Fri 13 Dec 2024 09:24:23 +0000
asID: 138915
IP address blocks: 156.244.47.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 51415 (0xc8d7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Oct 25 09:24:23 2024 GMT
Not After : Dec 13 09:24:23 2024 GMT
Subject: CN=671b63ca-d66c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:61:3f:b3:37:82:59:84:51:2f:1f:93:52:97:
45:0d:de:37:a1:92:b0:61:f3:ac:38:1f:2b:ef:36:
1d:da:f5:08:c9:d5:88:cd:06:a1:28:cc:0c:82:ad:
33:e8:06:94:44:e5:c2:15:09:a9:44:ca:8c:b0:69:
99:bf:30:e0:b7:39:98:94:e8:41:08:41:b3:71:dc:
75:ba:ec:64:02:19:70:09:10:2e:bf:41:0d:a2:ef:
71:77:71:62:ff:75:5a:89:09:80:01:7f:94:99:b2:
7f:50:2c:90:e3:b1:b8:3e:3b:50:aa:6f:8b:04:10:
fc:b3:9b:6c:a4:35:56:e0:0c:ee:f3:3c:be:5e:5d:
61:52:a6:27:cd:46:3c:c7:b2:c0:f6:5a:50:a6:09:
a0:9e:81:4d:47:84:40:8e:cb:b6:83:4e:ee:fd:08:
6b:35:67:8d:bc:d5:a4:6e:a2:26:43:db:9b:29:c3:
4c:d9:1e:5a:6e:cc:02:3a:a2:e1:a6:2f:b5:4b:3a:
a1:3e:95:d8:00:8c:86:04:2a:63:27:ad:99:d8:a6:
a2:73:74:af:82:a3:dd:ea:70:b7:ea:50:de:52:3b:
ec:c9:9a:89:a8:57:9e:75:55:a3:8c:47:86:67:f7:
fb:b1:ce:08:7d:da:17:13:ab:00:50:ca:ea:0b:4b:
a5:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:D9:F7:55:3B:73:43:D2:18:54:40:D7:C7:1D:58:37:5C:8A:D0:A8
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EDE71AD492B211EF8D7CB9A1762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.244.47.0/24
Signature Algorithm: sha256WithRSAEncryption
38:8c:24:60:5e:a6:31:ca:85:f5:fc:83:b6:b7:0a:8a:5a:5d:
f2:24:71:20:25:9d:48:f3:23:06:1f:61:36:51:a5:d4:5a:0f:
ad:6e:14:3e:62:6f:32:03:02:75:aa:4c:3a:57:ba:cc:e9:52:
75:55:81:df:e2:d4:c7:1f:bc:50:7e:55:89:06:ea:e5:f1:11:
ec:5a:99:e4:4d:e3:c6:ba:2d:17:ea:2c:a9:9e:fd:fe:94:e2:
8d:1e:66:9c:6a:30:07:7d:ed:ba:e0:3b:67:04:8d:59:1a:e4:
d2:0d:76:68:16:d2:d3:57:9f:20:ce:a7:7b:a6:11:84:ed:af:
e4:a2:14:06:bb:e4:5b:ac:cc:c4:bc:99:54:98:c4:fd:52:56:
35:39:90:a5:65:c7:12:65:e9:7f:74:ce:86:49:91:a3:0b:a0:
66:4d:48:bb:e5:0f:25:ee:eb:aa:24:3f:0b:27:28:5a:2b:bc:
d1:d2:64:09:4d:12:b9:41:a5:40:1d:4f:b5:89:6c:40:9f:6c:
81:c3:2b:ab:14:5b:2f:30:b3:5d:36:94:a2:7a:e9:20:04:9b:
93:2f:81:30:d2:17:68:e3:6b:51:01:86:b3:8b:86:81:9e:15:
4b:49:8a:fd:05:b9:96:7d:67:00:40:e3:6b:b4:97:50:3f:d7:
a2:e4:a8:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:10:55 2024 by rpki-client on console-ams.rpki-client.org